Apache Community

Apache Traffic Server: Regex mappings match with malicious domain names

Apache Traffic Server: Untrusted @ headers can spoof ATS internal metadata

Apache Traffic Server: Improper server-session reuse can expose data across client connections

Apache Traffic Server: PROXY protocol parsing has port truncation and a stack overflow

Apache Traffic Server: Listener and ACL handling allow access-control bypass

Apache Traffic Server: Out-of-bounds reads while parsing DNS responses

Apache Traffic Server: Cache deserialization and lifetime errors can corrupt state or crash the server

Apache Traffic Server: Remap configuration lifetime and TOCTOU errors cause use-after-free

Apache Traffic Server: HPACK encoder desynchronizes from the decoder after a failed header encode

Apache Traffic Server: SNI to Host header matching policy is not properly enforced